Empire Health respects the sensitivity of health-related information. This Privacy Policy explains what we collect through the website empiretowerbangkok.com, why we collect it, how we protect it, how long we keep it, and the choices you have. It should be read together with our Terms & Services.
Last updated: 21 March 2026. We may amend this Policy to reflect changes in our services or in applicable data-protection principles. The published date at the top of this page is the effective date of the current version.
Empire Health is a multidisciplinary medical centre providing specialist consultations, dental care, diagnostics coordination and health education. For the purposes of this website, Empire Health is the organisation that decides how personal data submitted through public forms is used to respond to you.
This Policy covers the public website and client-side forms. Clinical records created after you attend for care are additional health records. They are held to professional record-keeping standards and may contain more detail than a website enquiry. If a later clinical privacy notice is provided at registration, that notice governs the medical file; this Policy continues to govern website analytics and newsletter preferences.
When you use appointment, contact, comment, subscribe or unsubscribe forms you may provide: name; email address; optional contact number; department of interest; preferred date; subject line; free-text description of symptoms or questions; newsletter preference; and confirmation that you wish to subscribe or unsubscribe. You choose how much clinical detail to type. We ask you not to include another person’s health information without authority, and not to paste copies of identity documents into public forms.
Like most websites, our hosting environment may record technical data such as browser type, approximate time of visit, pages viewed and referring site. This data is used to keep the site secure and to understand which educational pages are useful. We do not use it to build a secret clinical profile about you.
We do not ask for payment-card numbers on this static website. We do not publish a public directory of patient names. We do not require you to create a password-protected account to read articles.
We use the information you submit to:
We do not sell personal data. We do not rent email lists. We do not allow third parties to advertise medicines to you based on the symptom text you typed into a form.
Depending on the context, we rely on one or more of the following fairness principles: your request for a step to be taken (for example, “please book me a cardiology slot”); our legitimate interest in running a safe clinic website; compliance with a legal duty; and, for optional newsletters, your consent—which you may withdraw on the Unsubscribe page at any time.
Health information is treated as sensitive. We collect it through forms only because you chose to share it in order to receive care or advice. Coordinators and clinicians access enquiry content on a need-to-know basis.
Within Empire Health, your enquiry is visible to staff whose job is to schedule, clinically triage or deliver the service you asked for. A dental request is not circulated to unrelated departments.
We may share information with:
We will not post your story on social media. If we ever wish to use a testimonial that could identify you, we will ask for separate, documented permission.
The website may be hosted on infrastructure that stores copies in more than one location for resilience. Where that occurs, we take steps that are reasonable in the circumstances to keep data protected, such as encrypted transport and access control. By submitting a form you understand that your message will travel across networks in order to reach our coordinators.
Website enquiries that do not become a clinical episode are kept only as long as needed to answer you, to evidence what was requested, and to defend against abuse—typically a limited administrative period unless a longer period is required by professional rules or an unresolved complaint.
If you attend for care, the resulting medical record is retained for the period required for clinical, legal and professional purposes, which is usually longer than a simple email thread. Newsletter records are kept until you unsubscribe, plus a short period so we can prove we respected the request and do not accidentally re-add you.
Technical logs are rotated on a schedule set by our hosting environment. Backup copies decay according to the backup cycle.
We use technical and organisational measures appropriate to a public healthcare website: access limited to authorised staff, staff training on confidentiality, and a rule that sensitive files are not downloaded onto unattended personal devices. No online transmission is perfectly secure. You can reduce risk by using a private device, by not forwarding appointment emails to large groups, and by omitting unnecessary identifiers from free-text boxes.
If we become aware of a security incident that is likely to affect your rights, we will take steps to contain it and, where the law or professional guidance requires, we will notify affected people and relevant authorities.
This static site is designed to function without a complex advertising cookie stack. Your browser may still store session information needed for basic operation. You can control cookies through your browser settings; blocking all cookies may affect some convenience features such as remembering a form field if you navigate away.
We do not use third-party advertising networks to profile patients. Embedded fonts or icon libraries loaded from public content-delivery networks may receive your IP address as part of ordinary web traffic; those providers have their own policies.
Educational articles may be read by families, but forms concerning a child should be completed by a parent or guardian. We do not knowingly use a child’s email for newsletters. If you believe a child has submitted personal data inappropriately, contact us through the contact form so we can delete or restrict it.
Subject to applicable law and to the need to keep certain clinical or legal records, you may:
To exercise a rights request, use the Contact Us form with the subject “Privacy request” and enough information for us to locate your enquiry (name, email used, and approximate date). We may need to verify that we are speaking with the right person before releasing data.
We do not use automated systems to refuse you healthcare. Client-side validation only checks that an email looks like an email and that required fields are filled. A human coordinator reviews appointment and contact requests.
Links to Facebook, Instagram, LinkedIn, YouTube or similar networks are provided for social sharing of educational content. Those platforms are independent controllers of any data you give them. Read their policies before logging in or posting.
Please use the Contact Us form. Describe your request clearly and include the email address you used on the site. A representative will respond to that address. For newsletter changes, the dedicated Subscribe and Unsubscribe pages are the fastest method.
If your concern is about a clinical incident rather than website data, mark the subject accordingly so it can be handled under our complaints pathway as well as under this Policy.
Health information is a trust. We collect as little as we can through public pages, we use it to help you obtain the right kind of care, and we do not treat your inbox as a marketing asset. If our practice ever falls short of that standard, we want to hear from you so we can put it right.
